Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-gsf1-xkth-eyhr
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket.

This issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9.0.0, from 10.0.0 through 10.8.0.

Users are recommended to upgrade to version 10.9.0, which fixes the issue.
Aliases
0
alias CVE-2026-42509
1
alias GHSA-5x9h-93gp-chpj
Fixed_packages
0
url pkg:maven/org.apache.wicket/wicket-parent@8.18.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.18.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.18.0
1
url pkg:maven/org.apache.wicket/wicket-parent@9.23.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.23.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.23.0
2
url pkg:maven/org.apache.wicket/wicket-parent@10.9.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.9.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.9.0
Affected_packages
0
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M1
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M1
1
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M2
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M2
2
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M3
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M3
3
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M4
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M4
4
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M5
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M5
5
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M6
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M6
6
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M7
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M7
7
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M8
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M8
8
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M9
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0-M9
9
url pkg:maven/org.apache.wicket/wicket-parent@8.0.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.0.0
10
url pkg:maven/org.apache.wicket/wicket-parent@8.1.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.1.0
11
url pkg:maven/org.apache.wicket/wicket-parent@8.2.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.2.0
12
url pkg:maven/org.apache.wicket/wicket-parent@8.3.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.3.0
13
url pkg:maven/org.apache.wicket/wicket-parent@8.4.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.4.0
14
url pkg:maven/org.apache.wicket/wicket-parent@8.5.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.5.0
15
url pkg:maven/org.apache.wicket/wicket-parent@8.6.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.6.0
16
url pkg:maven/org.apache.wicket/wicket-parent@8.6.1
purl pkg:maven/org.apache.wicket/wicket-parent@8.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.6.1
17
url pkg:maven/org.apache.wicket/wicket-parent@8.7.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.7.0
18
url pkg:maven/org.apache.wicket/wicket-parent@8.8.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.8.0
19
url pkg:maven/org.apache.wicket/wicket-parent@8.9.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.9.0
20
url pkg:maven/org.apache.wicket/wicket-parent@8.10.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.10.0
21
url pkg:maven/org.apache.wicket/wicket-parent@8.11.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.11.0
22
url pkg:maven/org.apache.wicket/wicket-parent@8.12.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.12.0
23
url pkg:maven/org.apache.wicket/wicket-parent@8.13.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.13.0
24
url pkg:maven/org.apache.wicket/wicket-parent@8.14.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.14.0
25
url pkg:maven/org.apache.wicket/wicket-parent@8.15.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.15.0
26
url pkg:maven/org.apache.wicket/wicket-parent@8.16.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.16.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.16.0
27
url pkg:maven/org.apache.wicket/wicket-parent@8.17.0
purl pkg:maven/org.apache.wicket/wicket-parent@8.17.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@8.17.0
28
url pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M1
purl pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M1
29
url pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M2
purl pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M2
30
url pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M3
purl pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M3
31
url pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M4
purl pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M4
32
url pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M5
purl pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.0.0-M5
33
url pkg:maven/org.apache.wicket/wicket-parent@9.0.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.0.0
34
url pkg:maven/org.apache.wicket/wicket-parent@9.1.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.1.0
35
url pkg:maven/org.apache.wicket/wicket-parent@9.2.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.2.0
36
url pkg:maven/org.apache.wicket/wicket-parent@9.3.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.3.0
37
url pkg:maven/org.apache.wicket/wicket-parent@9.4.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.4.0
38
url pkg:maven/org.apache.wicket/wicket-parent@9.5.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.5.0
39
url pkg:maven/org.apache.wicket/wicket-parent@9.6.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.6.0
40
url pkg:maven/org.apache.wicket/wicket-parent@9.7.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.7.0
41
url pkg:maven/org.apache.wicket/wicket-parent@9.8.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.8.0
42
url pkg:maven/org.apache.wicket/wicket-parent@9.9.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.9.0
43
url pkg:maven/org.apache.wicket/wicket-parent@9.9.1
purl pkg:maven/org.apache.wicket/wicket-parent@9.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.9.1
44
url pkg:maven/org.apache.wicket/wicket-parent@9.10.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.10.0
45
url pkg:maven/org.apache.wicket/wicket-parent@9.11.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.11.0
46
url pkg:maven/org.apache.wicket/wicket-parent@9.12.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.12.0
47
url pkg:maven/org.apache.wicket/wicket-parent@9.13.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.13.0
48
url pkg:maven/org.apache.wicket/wicket-parent@9.14.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.14.0
49
url pkg:maven/org.apache.wicket/wicket-parent@9.15.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.15.0
50
url pkg:maven/org.apache.wicket/wicket-parent@9.16.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.16.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.16.0
51
url pkg:maven/org.apache.wicket/wicket-parent@9.17.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.17.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.17.0
52
url pkg:maven/org.apache.wicket/wicket-parent@9.18.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.18.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.18.0
53
url pkg:maven/org.apache.wicket/wicket-parent@9.19.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.19.0
54
url pkg:maven/org.apache.wicket/wicket-parent@9.20.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.20.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.20.0
55
url pkg:maven/org.apache.wicket/wicket-parent@9.21.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.21.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.21.0
56
url pkg:maven/org.apache.wicket/wicket-parent@9.22.0
purl pkg:maven/org.apache.wicket/wicket-parent@9.22.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@9.22.0
57
url pkg:maven/org.apache.wicket/wicket-parent@10.0.0-M1
purl pkg:maven/org.apache.wicket/wicket-parent@10.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.0.0-M1
58
url pkg:maven/org.apache.wicket/wicket-parent@10.0.0-M2
purl pkg:maven/org.apache.wicket/wicket-parent@10.0.0-M2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.0.0-M2
59
url pkg:maven/org.apache.wicket/wicket-parent@10.0.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.0.0
60
url pkg:maven/org.apache.wicket/wicket-parent@10.1.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.1.0
61
url pkg:maven/org.apache.wicket/wicket-parent@10.2.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.2.0
62
url pkg:maven/org.apache.wicket/wicket-parent@10.3.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.3.0
63
url pkg:maven/org.apache.wicket/wicket-parent@10.4.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.4.0
64
url pkg:maven/org.apache.wicket/wicket-parent@10.5.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.5.0
65
url pkg:maven/org.apache.wicket/wicket-parent@10.6.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.6.0
66
url pkg:maven/org.apache.wicket/wicket-parent@10.7.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.7.0
67
url pkg:maven/org.apache.wicket/wicket-parent@10.8.0
purl pkg:maven/org.apache.wicket/wicket-parent@10.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8mc3-2fm1-k7ej
1
vulnerability VCID-gsf1-xkth-eyhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.wicket/wicket-parent@10.8.0
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-42509
reference_id
reference_type
scores
0
value 0.00233
scoring_system epss
scoring_elements 0.46434
published_at 2026-06-14T12:55:00Z
1
value 0.00233
scoring_system epss
scoring_elements 0.46292
published_at 2026-06-11T12:55:00Z
2
value 0.00233
scoring_system epss
scoring_elements 0.46448
published_at 2026-06-13T12:55:00Z
3
value 0.00233
scoring_system epss
scoring_elements 0.46438
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-42509
1
reference_url https://github.com/apache/wicket
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/wicket
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-42509
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-42509
3
reference_url http://www.openwall.com/lists/oss-security/2026/05/06/2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2026/05/06/2
4
reference_url https://lists.apache.org/thread/52nrq4tt07gxz4r6sj5gyocz5s6bprjp
reference_id 52nrq4tt07gxz4r6sj5gyocz5s6bprjp
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-07T12:16:54Z/
url https://lists.apache.org/thread/52nrq4tt07gxz4r6sj5gyocz5s6bprjp
5
reference_url https://github.com/advisories/GHSA-5x9h-93gp-chpj
reference_id GHSA-5x9h-93gp-chpj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5x9h-93gp-chpj
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-gsf1-xkth-eyhr